JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

216.250.113.147

Neutral Activity

Abuse confidence score ?

0% Low Risk

67 reports

29 reporters · latest 1 year ago

ISP	IONOS Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8560
Hostname(s)	infongslxa-9.perfora.net
Domain Name	ionos.com
Country	🇺🇸 United States of America
City	Kansas City, Missouri

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

216.250.113.147 has been reported 67 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 216.250.113.147

This IP address has been reported a total of 67 times from 29 distinct sources. 216.250.113.147 was first reported on January 7th 2023, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2025-04-23 07:18:32 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 216.250.113.147 (infongslxa-9.perfora.net): 1 i ... show more (mod_security) mod_security (id:210730) triggered by 216.250.113.147 (infongslxa-9.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 23 03:18:25.094949 2025] [security2:error] [pid 3580:tid 3580] [client 216.250.113.147:41126] [client 216.250.113.147] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|turtletaekwondo.com\|F\|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "turtletaekwondo.com"] [uri "/wp-config.backup"] [unique_id "aAiUQcItPXVHb8KoU3uxvAAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-04-23 07:00:25 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 216.250.113.147 (infongslxa-9.perfora.net): 1 i ... show more (mod_security) mod_security (id:210730) triggered by 216.250.113.147 (infongslxa-9.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 23 03:00:18.244276 2025] [security2:error] [pid 3973240:tid 3973240] [client 216.250.113.147:54142] [client 216.250.113.147] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|grapplerunion.com\|F\|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "grapplerunion.com"] [uri "/wp-config.backup"] [unique_id "aAiQAm2GM1XjATfgW7tLNQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-04-23 04:53:39 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 216.250.113.147 (infongslxa-9.perfora.net): 1 i ... show more (mod_security) mod_security (id:210730) triggered by 216.250.113.147 (infongslxa-9.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 23 00:53:32.676370 2025] [security2:error] [pid 32671:tid 32671] [client 216.250.113.147:44066] [client 216.250.113.147] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|ecrealty.net\|F\|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ecrealty.net"] [uri "/wp-config.backup"] [unique_id "aAhyTBofb-SqCrTYz2TZWgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-04-22 23:04:10 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 216.250.113.147 (infongslxa-9.perfora.net): 1 i ... show more (mod_security) mod_security (id:210492) triggered by 216.250.113.147 (infongslxa-9.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 22 19:04:05.627688 2025] [security2:error] [pid 18710:tid 18710] [client 216.250.113.147:35568] [client 216.250.113.147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.old" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "andrejblatnik.com"] [uri "/wp-config.old"] [unique_id "aAggZRWhTEQFSRCJTM0BWQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-04-22 21:11:34 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 216.250.113.147 (infongslxa-9.perfora.net): 1 i ... show more (mod_security) mod_security (id:210492) triggered by 216.250.113.147 (infongslxa-9.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 22 17:11:28.756641 2025] [security2:error] [pid 11858:tid 11858] [client 216.250.113.147:41082] [client 216.250.113.147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "silsby.com"] [uri "/wp-config.php.old"] [unique_id "aAgGAFivRVW0ktxfzRvn-wAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-04-22 20:52:10 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 216.250.113.147 (infongslxa-9.perfora.net): 1 i ... show more (mod_security) mod_security (id:210492) triggered by 216.250.113.147 (infongslxa-9.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 22 16:52:04.618152 2025] [security2:error] [pid 986647:tid 986647] [client 216.250.113.147:50016] [client 216.250.113.147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "matterofbritain.com"] [uri "/wp-config.php.old"] [unique_id "aAgBdB_JCLYWJC7W7VNrOAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-04-22 15:11:18 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 216.250.113.147 (infongslxa-9.perfora.net): 1 i ... show more (mod_security) mod_security (id:210492) triggered by 216.250.113.147 (infongslxa-9.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 22 11:11:12.199420 2025] [security2:error] [pid 2818508:tid 2818508] [client 216.250.113.147:43894] [client 216.250.113.147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sandwcreations.com"] [uri "/wp-config.php.old"] [unique_id "aAexkNasM8MzG5UXkQAwVwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-04-22 10:20:02 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 216.250.113.147 (infongslxa-9.perfora.net): 1 i ... show more (mod_security) mod_security (id:210492) triggered by 216.250.113.147 (infongslxa-9.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 22 06:19:55.354617 2025] [security2:error] [pid 20357:tid 20357] [client 216.250.113.147:50638] [client 216.250.113.147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.old" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "packersandribsbbq.com"] [uri "/wp-config.old"] [unique_id "aAdtS6_BnXHlaWcM-gVerAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-04-21 23:20:51 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 216.250.113.147 (infongslxa-9.perfora.net): 1 i ... show more (mod_security) mod_security (id:210492) triggered by 216.250.113.147 (infongslxa-9.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 21 19:20:45.462512 2025] [security2:error] [pid 1039:tid 1039] [client 216.250.113.147:41476] [client 216.250.113.147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.old" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "escribaniasmith.com.ar"] [uri "/wp-config.old"] [unique_id "aAbSzUNgmp8e0TAm-e26sQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-04-21 08:37:04 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 216.250.113.147 (infongslxa-9.perfora.net): 1 i ... show more (mod_security) mod_security (id:210492) triggered by 216.250.113.147 (infongslxa-9.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 21 04:36:57.358571 2025] [security2:error] [pid 31257:tid 31379] [client 216.250.113.147:40290] [client 216.250.113.147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.old" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "metropolitanbasel.org"] [uri "/wp-config.old"] [unique_id "aAYDqfSxVWK84CBoFhteHAAAAQs"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 Ivo Vynckier	2025-04-21 06:59:00 (1 year ago)	216.250.113.147 - - [20/Apr/2025:22:14:50 +0200] "GET /wp-config.old HTTP/1.1" 301 258 "-" "-"	Web App Attack
🇺🇸 TPI-Abuse	2025-04-21 04:58:23 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 216.250.113.147 (infongslxa-9.perfora.net): 1 i ... show more (mod_security) mod_security (id:210492) triggered by 216.250.113.147 (infongslxa-9.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 21 00:58:20.530385 2025] [security2:error] [pid 21607:tid 21607] [client 216.250.113.147:41532] [client 216.250.113.147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.old" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cityforsalefilm.com"] [uri "/wp-config.old"] [unique_id "aAXQbJ64c8ug6rU5QVtU6gAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-04-21 00:42:17 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 216.250.113.147 (infongslxa-9.perfora.net): 1 i ... show more (mod_security) mod_security (id:210492) triggered by 216.250.113.147 (infongslxa-9.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 20 20:42:12.201455 2025] [security2:error] [pid 966:tid 991] [client 216.250.113.147:45818] [client 216.250.113.147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "intartists.com"] [uri "/wp-config.php.old"] [unique_id "aAWUZLtG0iOz8woM3vsGjQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇿 Tripwire	2025-04-21 00:09:10 (1 year ago)	Scanning for exploits - /wp-config.php.old	Web App Attack
Anonymous	2025-04-20 22:49:34 (1 year ago)	216.250.113.147 - - \[21/Apr/2025:06:49:33 +0800\] \"GET /wp-config.php.old HTTP/1.1\" 301 465 \"-\" ... show more 216.250.113.147 - - \[21/Apr/2025:06:49:33 +0800\] \"GET /wp-config.php.old HTTP/1.1\" 301 465 \"-\" \"-\" show less	Web App Attack

Showing 1 to 15 of 67 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 174.138.41.200

🇮🇳 165.101.134.130

🇳🇱 109.160.32.25

🇸🇬 103.216.221.84

🇨🇳 101.96.196.4

🇳🇱 91.92.42.57

🇮🇹 79.57.94.57

🇨🇳 42.227.2.160

🇨🇳 42.179.123.186

🇺🇸 40.124.178.154

🇷🇺 31.173.21.229

🇺🇸 3.86.114.186

🇰🇷 222.116.19.117

🇸🇦 151.254.88.168

🇨🇳 103.191.243.96

🇮🇳 103.13.40.2

🇺🇸 66.181.46.22

🇺🇸 66.132.172.149

🇬🇷 46.246.215.253

🇯🇵 42.126.214.150